CVE-2013-3692
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
13/07/2013
Last modified:
11/04/2025
Description
BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of a crafted application.
Impact
Base Score 2.0
6.20
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:blackberry:blackberry_os:*:*:*:*:*:*:*:* | 10.0.10.261 (including) | |
| cpe:2.3:o:blackberry:blackberry_os:10.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:blackberry:blackberry_os:10.0.10:*:*:*:*:*:*:* | ||
| cpe:2.3:o:blackberry:blackberry_os:10.0.10.85:*:*:*:*:*:*:* | ||
| cpe:2.3:h:blackberry:z10:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page